function _security_review_help in Security Review 7

Same name and namespace in other branches

1. 6 security_review.help.inc \_security_review_help()

@file Main help definition.

1 call to _security_review_help()

security_review_check_help in ./security_review.pages.inc

Page callback provides general help and check specific help documentation.

File

./security_review.help.inc, line 8

Main help definition.

Code

function _security_review_help() {
  drupal_add_js(drupal_get_path('module', 'security_review') . '/security_review.js');
  $output = '';
  $output .= '<p>';
  $output .= t('You should take the security of your site very seriously.
    Fortunately, Drupal is fairly secure by default.
    The Security Review module automates many of the easy-to-make mistakes that render your site insecure, however it does not automatically make your site impenetrable.
    You should give care to what modules you install and how you configure your site and server.
    Be mindful of who visits your site and what features you expose for their use.');
  $output .= '</p>';
  $output .= '<p>';
  $output .= t('You can read more about securing your site in the <a href="!do">drupal.org handbooks</a> and on <a href="!cd">CrackingDrupal.com</a>.
    There are also additional modules you can install to secure or protect your site. Be aware though that the more modules you have running on your site the greater (usually) attack area you expose.', array(
    '!do' => 'http://drupal.org/security/secure-configuration',
    '!cd' => 'http://crackingdrupal.com',
  ));
  $output .= '</p>';
  $output .= '<p>' . l(t('Drupal.org Handbook: Introduction to security-related contrib modules'), 'http://drupal.org/node/382752') . '</p>';

  /*$output .= '<h3>' . t('Contrib modules for additional security and strength') . '</h3>';
    $output .= '<p>' . t('There are a wealth of modules on drupal.org.') . '</p>';
    $items[] = _security_review_help_ssl();
    $items[] = _security_review_help_spam();
    $output .= theme('item_list', $items);*/
  return $output;
}